{"data":{"id":"7dc5638c-9014-4db7-bb05-09280d7a3939","title":"GHSA-m4rf-3fr8-xwx3: NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)","summary":"NLTK's Stanford Java wrapper classes (GenericStanfordParser, StanfordTagger, StanfordTokenizer, StanfordSegmenter) pass user-supplied java_options through the per-call options parameter of nltk/internals.py java(), which calls subprocess.Popen without _validate_java_options(). This bypasses the validation added for CVE-2026-12841, which blocks flags such as -agentpath, -javaagent, -agentlib and @argfile when set through config_java(). An attacker who controls java_options can inject these JVM flags, which the source says can achieve arbitrary code execution, and the issue is incomplete fix of CVE-2026-12841.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-m4rf-3fr8-xwx3","publishedAt":"2026-09-01T20:38:22.000Z","cveId":"CVE-2026-79675","cweIds":null,"cvssScore":null,"cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["nltk@<= 3.10.2 (fixed: 3.10.3)"],"affectedPackageNames":["nltk"],"affectedPackageRefs":["pypi:nltk"],"affectedVendors":[],"affectedVendorsRaw":["NLTK","Stanford NLP wrappers"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00775,"epssCheckedAt":"2026-11-04T12:08:33.434Z","kevDateAdded":null,"advisoryAliases":["GHSA-m4rf-3fr8-xwx3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-09-01T20:38:22.000Z","fixReleasedAt":"2026-08-12T23:44:13.478Z","daysToFix":-20,"fixCheckedAt":"2026-10-29T21:31:04.486Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"nltk","fixedVersion":"3.10.3","matchedVersion":"3.10.3","fixReleasedAt":"2026-08-12T23:44:13.478Z","daysToFix":-20,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:31:04.341Z"}]}}